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Abstract 

We consider a self-decimated generator of pseudorandom numbers and examine the 
preperiod A and the period \x of its state sequence. We obtain the expectations and 
variances of A and \x for the case when decimation steps are chosen randomly and 
independently from the set {1,2}. 

1 Results 

Let N be the set of all positive integers, N = NU {0}, A C N be some finite alphabet. 
We denote by A* the set of all finite words in the alphabet A (including the empty word e) 
and by A w the set of all one-way infinite words (see PJ Ej for further details). Given a 
word a G A*, let 1(a) be the length of a and w(a) be the sum of letters of a. Let c n denote n 
successive instances of the letter c and ab denote the concatenation of the words a and b. 

Given s = s Si ... G A^ and T G N, determine the numbers A = X(s, T) G N and 
ji = fi(s, T) G N such that 

T | (s x + s A+ i + . . . + sx+n-i) (1) 

and T does not divide any of the sums s t + s t +i + . . . + s T , < t < t < X + fi — 1. For 
example, if s = 2212221 . . . = 2 2 12 3 1 . . ., then 

A(s, 1) = 0, /i(s, 1) = 1, A(s, 2) = 0, fi(s, 2) = 1, . . . A(s, 8) = 2, //(s, 8) = 5, . . . . 

The characteristics A and \x describe periodic properties of self-decimated generators of 
pseudorandom numbers (see Ej). Consider a generator G with the set of internal states 
S, |S| = T, and the state-transition function ip: S — > S. Let ip be a full cycle substitution, 
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usual way of G functioning, one chooses an initial state So G S, calculates the sequence 

S H . 1 = cp(S t ), t = 0,1,..., (2) 

and uses the current internal state St to determine the current output pseudorandom number. 
The self- decimation (of internal states of G) means using an additional function d: § — > A 
and replacing (j2J) by the rule 

S t+ i=<p d{St) (St), t = 0,l,.... (3) 

Now, if the word s consists of the successive letters s t = d(S t ), then A(s,T) and fi(s,T) are 
respectively the preperiod and period of the state sequence (J3J). 

If the letters of s are chosen randomly, then A and \x become random variables. The 
expectations EA, E/x and variances DA, D // of these variables are of interest in connection 
with the estimation of the preperiod and period of self-decimated generators. One of the well- 
known results in the theory of random mappings can be stated as follows: If the letters of s 
are chosen randomly, independently and uniformly from the alphabet A = {0, 1, . . . , T — 1}, 
then EA(s, T) and E/i(s, T) have the form + 0(1) as T — > oo (see, for example, [Hj). 

Unfortunately, obtaining similar asymototic (or exact) expressions for arbitrary alphabet A 
seems to be a more complex task. 

We consider the frequent choice A = {1, 2} and obtain the following result. 

Theorem. If the letters of the word s = SqSi . . . G {1,2}^ are chosen randomly, indepen- 
dently with the probabilities 

P{ St = l} = l-p, P{ St = 2}=p, 0<p<l, t = 0,1,..., 

then as T — > oo it holds that 

E^.TH (1 _ p) ( 1+; , )2 +0(P T n Ev(s,T) = ^+0(j?n (4) 

d ^- t )- (1 P . + S(Z\y +0{ ' Tt2) ' D "( s . T ) = Z ^r + °(f Tr2 )- < 5 > 

Note that P|. (jHJ) also hold for the random word s = SqSi . . . G {q, 2g}" ; , where q G N is 
coprime to T and P {s t = q} = 1 — p, P {s t = 2q} = p. 

Note also that R. Rueppel in the paper [3] examined the case when the word s is deter- 
mined from a linear recurrence sequence 00,01,... over the field of order 2 by the rule 

s t ={ t = 0,l,.... 

(3 o t = i, 

Rueppel showed that if the characteristic polynomial of the sequence o , 01, . . . is primitive 
of degree k, then 



fi{s,T) 



IT 



T 
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where |_^J is the largest integer < z. As we can see from Theorem, this estimation agrees 
with the expectation E/x(s, T) for the random word s with p = 1/2. 
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Given s and T, determine the words Sq . . . s\-i and S\ . . . sa+^-i, which we call the prefix 
and cyclic part of s, respectively. Conversely, any nonempty word a G A* is a cyclic part of 
some word s. Given a, we can determine the possible values of T = T(a) and the set B(a) 
of the possible prefixes of s, using the following restrictions: 

PI) w(a) = (mod T); 

P2) the residues 

0, a , a + ai, . . . , a + a x + . . . + az (a) _ 2 (mod T) (6) 
are pairwise distinct; 
P3) if b e -B(a) and b ^ e, then any of the residues 

—bi(b)-i, —bi(b)-i — bi(b)-2,---, — bi(b)-i — h(b)-2 — ■ ■ ■ — bo (mod T) 

differs from the residues (JO}. 

Indeed, the condition PI follows from the definition of a cyclic part. If the condition P2 
fails, then 

a t + . . . + a T = (mod T) 

for some t, r, < t < r < 1(a) — 1 and a cannot be a cyclic part. Finally, if the condition 
P3 fails, then one of the congruences 

b t + . . . + &/(6)-i = (mod T), b t + . . . + + ao + • • • + «r = (mod T) 

holds for some t < 1(b) — 1, r < 1(a) — 1 and a cannot be a cyclic part again. 

Suppose that A = {1,2} and let x = (x\,x%), y = (2/1,1/2)- Given C A*, define the 
generating function 

G n (x, y, = ^ oK, n 2 , m 1; m 2 , ^xfx^yr^ 2 ^, (7) 

ni,ri2,mi,m2>0 

where g(n\, n 2 , mi, m 2 , t) is the number of the words s with the cyclic part a£fi and prefix 
b £ B(a) such that a contains rti letters 1 and n 2 letters 2, 6 contains mi letters 1 and m 2 
letters 2, and T(a) = t. 

Let us divide A* into the subsets Q\, f2 2 , ^3, Q4 (which will be defined below) and 
determine the generating function of the form (JJJ) for each subset. 

1. r2i = {2}*1. If a G f2i, then T | w(a) according to PI and T > 1(a) > w(a)/2 according 
to P2. Therefore, T(a) = w(a). Now, if a = 2 m l, then B(a) = {2 k : k = 0, . . . , m} 



3 



G n - L (x, y,z) = J2 xix^z 2m+1 J] y\ 

m>0 k=0 



_±l_ E( ^ r _±H| E(W) . 

y2 m>0 y m>0 



(1 - y 2 )(l - x 2 z 2 ) (1 - y 2 )(l - x 2 y 2 z 2 ) 

(1 - x 2 z 2 )(l - x 2 y 2 z 2 )' 

2. Q 2 = {1, 2}*1{2}*1. Again, T(a) = w(a) according to PI, P2. Let a = al2 m l, a G A*. 
Using P3, we obtain 5(a) = {2 fc : fc = 0, . . . , m}. Therefore, 

m 

G n , 2 (x, y, z) = E(^ + E z^^ 2 E 

«>0 m>0 fc=0 

2 2 

x{z z 



(1 - - x 2 z 2 ){\ - x 2 z 2 ){l - x 2 y 2 z 2 ) ' 

3. Q 3 = {1, 2}*12{2}*. In this case T(a) = w(a) and 5(a) = {s} U {2 fe l : jfe = 0, . . . , m} 
for a = al22 m . Therefore, 

i + E» fc 

fc=0 

xix 2 z 3 (l + y_i - x 2 y 2 z 2 ) 

(1 - xiz - x 2 z 2 )(l - x 2 z 2 )(l - x 2 y 2 z 2 ) 

4. Q 4 = {2}*. If a = 2 m , then T(a) = 2m and 5(a) = {e} U {2 fe l : jfe = 0, . . . , m - 1}. In 
addition, T(a) = m and 5(a) = {e} for odd m. The generating function has the form 

m— 1 



Go 4 (x, y, z) = E < z " m 1 + E I/H/2 + E 



2m+l 2m+l 
X 2 



m>l \ k=0 / m>0 

1 + x 2 y x z 2 - x 2 ?/2^ 2 ^ 



(1 - x 2 z 2 ){\ - x 2 y 2 z 2 ) \-x\z 2 ' 
Finally, we get 

G A * (x, y , z) = G Ul (x, y , z) + Gn 2 (x, y , z) + Gn 3 (x, y , z) + Gn 4 (x, y , z) 

1 + X 2 y x Z 2 + X1X21/2-2 3 - ^2y2-2 2 ^2-2 



(1 - a; 2 y2-2 2 )(l - ^1-2 - ^2-2 2 ) ' l-a^z 2 ' 

To find the expectation EA(s,T), introduce the operator 5 y = yi^- +y2^ and denote 
7r = (1 —p,p). We have 



ni ,U2 ,mi ,rri2>0 
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of (j3J) follows from 



1 — p)pz 1 



y=7r (1 -z)(l -p 2 z 2 ) 2 

p 1 p 



+ 



(l-p)(l+p) 2 (l-z) 4(1 -pz) 2 4(l-p)(l-pz) 
1 — p (1 — p)p 



4(l+p)(l+p^) 2 4(l+p) 2 (l+p^) 



:i-p)(i+p) 2 ^ 4^ - - 4(i-p )fcn 

1 W , ^fcjfc (1 -P)P v-, . A k z k 



Similarly, introducing the operator 2£ x = xigf^- + and using the equalities 



X=7T ' 



E (i,(s, T) = [z T ]Ex G A « (x, 7T, 2) 
D X(s, T) = [z T ]El G A * (tt, y, z) | y=7r - (E A(s, T)) 2 
D/i( a ,T) = [* T ]*2 G A ,(x,7r,^)| x=7r - (E M (s,T)) 2 

we prove the remaining parts of (jlj), (JHJ). 
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